The agent tried to install some packages I wasn't sure about. I tried to give it some more context and directions, but it just ignored it all and kept saying that "I was not allowing the shell command to complete". I wasn't, indeed, but I was sending custom instructions.
The 2 messages at the bottom at the conversation were the instructions that most likely got queued as messages and got sent after the agent gave up on shell permission.
